spoofer coverage cheats in work keys faq discord
kernel-level identity tools · windows 10 / 11 · x64

tools for the
unwatched.

moonwater builds kernel-level identity tools for hardware-banned machines. one press rewrites the machine a ban remembers — nothing left for it to find.

0 layers rewritten 0 identifiers 0 processes left behind 0 reinstalls · flashes · bsods
crypto only · key by email · discord support
moonwater — spoofer undetected
> run start
> scanning machine… 0 identifiers found
> sealing… done
clean. the machine they knew
no longer exists
disk & volume serialsnvme · sata · volidrewritten
smbios & boarddmi · dimm spdrewritten
network idsndis · wmirewritten
tpm identifierstpm 2.0 · ekrewritten
windows machine idsregistry · wmirewritten
traceseventlog · prefetchswept
6 layers · 24 identifiers · one press
eventlog412 entries cleared✓
prefetchswept✓
temp cachesswept✓
usn journalrebuilt✓
network cachesflushed✓
> nothing left to find.

some machines are watched. ours disappear.

moonwater — tools for the unwatched
01 — the win

not permanent. not temporary. both.

most spoofers make you choose: run one before every match, or hand your machine to a risky flash. moonwater is the third way — a full spoof, whenever you want it, with nothing to reinstall, nothing to flash, nothing to break.

the old ways

the old way
  • session tools — forget once, the account burns.
  • they revert on every reboot.
  • permanent spoofers — a windows reinstall and a bios flash, to change one serial.
  • the worst ones bsod — a few never boot again.
you carry the risk.

moonwater

on demand
  • full spoof, on demand — whenever you want it.
  • no windows reinstall. no bios flash.
  • no bsod. no risk to your machine.
  • nothing left running. nothing to remember before a match.
the best of both. none of the risk.
02 — the spoofer

what it changes.

a hardware ban is a fingerprint. this rewrites six layers of it at kernel level — the drive, the board, the network, the tpm, the system, and the traces around them.

the rewrite — layer by layer

disk & volume

volume serials, drive firmware, partition signatures — the first things a ban writes down.

0/ 6 rewritten
disk & volume4C2A-9F31 · WD-X4N8K21rewritten
board & smbiosX670E-PLUS · bios 1.A2 · dimm 9K2F41rewritten
network macsA4:B1:C1:2E:77:0F · 9C:2A:6B:11:D3:04rewritten
tpmEK-7F2C-91A4 · SRK-B3E8rewritten
windows machine idsGUID 3F2A91C4 · PID 00330-80000rewritten
the tracesusn journal · prefetch · event logrewritten
disk

disk & volume serials

drive firmware serials and the volume ids windows reports to anything that asks.

nvme · sata · volid
board

smbios & board

motherboard serials, bios strings, and the memory module serials beside them.

dmi · dimm spd
network

network ids

every adapter's mac address — cached and live — rewritten together.

ndis · wmi
tpm

tpm identifiers

the firmware tpm identity some anti-cheats bind a ban to.

tpm 2.0 · ek
system

windows machine ids

machineguid, product id, install fingerprints — the ids software trusts first.

registry · wmi
traces

the leftovers

logs, caches, last-seen artifacts — swept in the same run.

eventlog · prefetch
full spoof whenever you want no reinstall · no bios flash · no bsod nothing left running windows 10 / 11 · x64 · intel & amd
01

take a key

crypto, minutes. the loader and guide land in your inbox.

02

run the loader

one press. it checks your machine, then rewrites it.

03

play on a fresh account

the old account stays banned. the machine is new.

architecturekernel-level. one driver, one press.
the spooffull, on demand. run it whenever you want.
the risknone. no windows reinstall, no bios flash, no bsod.
footprintnothing left running. no background processes.
the gamenever touched — no injection, nothing of the game modified.
telemetrynone. no logs, no history, no account data.
deliveryloader + guide, by email, minutes after payment.
paymentcrypto only. no cards, no processors.
supporta human on discord. always.
requirementswindows 10 / 11 · x64 · intel & amd.
guided demonstration — four presses live
disk & volume
disk serialS6EWNX0T312277 → S6EWNX0T312277
volume id3C4D-11A0 → 3C4D-11A0
board & network
board serialMB-2211R0X → MB-2211R0X
mac address00:1B:44:11:3A:B7 → 00:1B:44:11:3A:B7
tpm & system
tpm idEK-8A21-4470 → EK-8A21-4470
machine guide8238fa6-bf53 → e8238fa6-bf53
this is the machine as it sits right now — six layers a ban can read.
step 1 of 4
24 identifiers · 6 layers · one pressnothing left running — full spoof, on demand
03 — the loader

one press. the whole product.

moonwater is a native windows app — no browser, no bloat. it verifies your machine, runs the rewrite, and seals it. the guide ships inside.

> moonwater loader v1.0 > carrier loaded 0% > identity engine ready > awaiting key MW-••••-•••• welcome.
the loaderboot · verify · welcome
nativea real windows app — no browser, no webview, nothing to bloat it.
one pressit verifies your machine first, then runs the rewrite and seals it.
the guideships inside the app and the email — including what to do after a ban.
the keyyour key unlocks it; the loader handles the rest.
keys@moonwaterhq.comyour key — moonwater

your key, bound to this machine:

MW-4H2K-9XQ1

the loader and the guide are attached. one press and you're gone.

arrives in about a minute · resend any time
the guide — after a ban, three moves
01

breathe. the machine is the problem — not you. the account is gone; the hardware is what they remember.

02

run the rewrite. one press in the loader. six layers, a new machine, nothing left running.

03

start fresh. new account, an email used nowhere else, and play like it never happened.

04 — coverage

proven against all of them.

the anti-cheats below ban machines, not accounts — and machines are what this product rewrites. denuvo, the hardest of them, is proven on our own hardware. every one below is proven, each with the games they police.

denuvo

proven
ARC Raiders · the finals

the binding that reads everything — tested on our own machines, and it read clean.

easy anti-cheat

proven
fortnite · rust · apex · dead by daylight

battleye

proven
tarkov · pubg · r6 · dayz · gta v · destiny 2

vac

proven
cs2 · dota 2 · tf2

ricochet

proven
warzone · modern warfare

ace

proven
delta force · arena breakout

byfron

proven
roblox

fairfight

proven
battlefield 2042 · bf1 · bfv
check yours23 titles · every one proven
›esc

eight anti-cheats. twenty-three games. a machine none of them have met.

the record

the last ban reached our test machine on sept 18 — denuvo, ARC Raiders. rewritten the same night; still clean.

12days since
05 — the motion

see it move.

watch a ban land — then watch it stop existing. the whole run, in one take.

moonwater — the run undetected
> run start
> scanning machine… 0 identifiers found
> sealing… done
clean. the machine they knew
no longer exists
moonwater kernel-level identity tools
the machine they knew
no longer exists.
24 identifiers · one press · nothing left running
banned hardware flagged — a new account on this machine dies in hours
the run · win11 · 24 identifiers rewritten
06 — the note

the paper.

what a hardware ban is, what a spoofer does, and what we do differently — in full, before the key.

moonwater — technical note · rev 1.0 · 2026 for customers, before the key

§01 what a hardware ban is

anti-cheats don't ban accounts. they ban machines. when a ban lands, the anti-cheat writes down the fingerprint of the computer it was playing on — drive serials, motherboard and bios strings, memory module serials, network card addresses, the firmware tpm identity, windows machine ids. that fingerprint is the ban. a new account on the same machine is gone in hours: the account was never the problem.

§02 what a spoofer does

a spoofer rewrites that fingerprint. the machine keeps running exactly as before, but every identifier the ban was written against now reports something new. done correctly, the anti-cheat reads a machine it has never met. done incorrectly — in userland, at the registry layer — it reads the old machine wearing a mask, and the ban lands again.

§03 what we do differently

moonwater works at kernel level, where the identifiers actually live. one press rewrites six layers — disk, board, network, tpm, system, traces — and seals them. it's a full spoof, on demand: run it whenever you want, and nothing is left running in the background afterward. no windows reinstall, no bios flash, no bsod — your machine is never at risk. there is nothing to remember, and nothing to relaunch before a match.

§04 what it never does

it does not unban accounts — account bans stay. it does not touch the game: no injection, no modified files, nothing for a scan to find. it does not keep logs, telemetry or history of any kind. it does one thing: the machine the ban knew no longer exists.

— end of note questions live in the discord
07 — the second line

cheats are in the forge.

the same kernel work, aimed at playing — not just surviving. the first run stays small.

in work
the forgefirst run small

ARC Raiders — the first title

in work
aimbottargeting that reads the game, not your mousein work
espplayers, loot, extracts — drawn cleanin work
radarthe map, honestly awarein work
triggerbotthe shot lands when it shouldin work
spoofer-awarebuilt on the same identity layerat launch

the first run stays small and numbered. founding keys go first.

get told when it opens →
08 — keys

three windows.

one product, one press. a full spoof whenever you want it — the key is your window to run it: tonight, or the night the next ban lands.

the product

moonwater — kernel-level identity tools.

a native windows app that rewrites the machine a hardware ban remembers. one press rewrites 24 identifiers across six layers — disk and volume serials, board and smbios data, network macs, tpm, windows machine ids, and the traces around them.

it's a full spoof, on demand — run it whenever you want. no windows reinstall, no bios flash, no bsod, and nothing left running afterward.

in the boxthe loader · your key · the guide · discord support
runs onwindows 10 / 11 · x64 · administrator access
deliverycrypto only — key by email, minutes after payment clears
your windownight, week or month · re-runs covered inside it
show in checking rates…
night $6.99one evening —BTC
  • loader + guide
  • full identity layer
  • window: one evening
take the night
most taken week $19seven days —BTC
  • everything in night
  • window: seven days
  • priority in discord
take the week →
month $39thirty days —BTC
  • everything in week
  • window: thirty days
  • founding price locked
take the month
crypto only — btc · eth · usdt · ltc · xmr key by email, minutes after payment if it's down, your clock freezes
paying — three steps
01

pick your window. night, week or month — priced in your coin.

02

send the exact amount. to the wallet address this site or our discord shows you — nowhere else.

03

the key lands by email. minutes after it clears, bound to your machine.

founding prices — they rise when the forge opens
09 — how we operate

quiet rules.

01

built in-house.

every line of the loader and the identity layer is ours. nothing resold, nothing rented.

02

kernel-level.

the work happens where a ban reads the machine. one press, nothing left running in the background.

03

we patch when the game patches.

when an update breaks something, it gets pulled and fixed — not sold anyway.

04

if it's down, your clock freezes.

days don't burn while a fix is in the works.

05

a human answers.

discord, always. crypto only — we keep nothing about you.

before you buy — three rules
01

a fresh email. not the address tied to the banned account — and used for nothing else.

02

pay only from here. the wallet address comes from this site or our discord. anywhere else, it's a scam.

03

we never dm first. your key is bound to your machine — nobody needs it but you, and anyone asking for it is stealing.

the log — what actually shipped
sept 18

the ban lands — ARC Raiders, denuvo. the machine is marked.

sept 18

rewritten the same night. it has read clean since.

sept 24

the loader boots to its welcome gate.

sept 29

this site goes up.

sept 30

licensing green — 64 of 64 — and keys open.

10 — the questions

straight answers.

›8 answers

six layers: disk and volume serials, smbios and board data, network macs, tpm identifiers, windows machine ids, and the traces around them. the machine reports a new identity at kernel level. the note, §02 →

neither — and both. it doesn't revert like the session tools, and it never demands the hardware spoofers' ritual: a windows reinstall or a bios flash. you run a full spoof whenever you want, with nothing left running after. the note, §03 →

the key is your window to run the loader. run a full spoof whenever you want inside it — tonight, or save it for the night the next ban lands. re-runs are covered. if the service is ever down, your clock freezes. need a reset? prove it to support and your key moves with it.

any tool can be banned eventually — anyone promising otherwise is lying. what this removes is the machine the last ban remembers: you play on a fresh account, on a machine that reads as new. the note, §04 →

proven against denuvo on ARC Raiders — tested on our own machines. easy anti-cheat, battleye, vac, ricochet, ace and the rest are proven too: fortnite, rust, tarkov, cs2, warzone, gta v, roblox and more.

no — account bans stay. it lifts the hardware ban, so a fresh account can play on the same machine.

windows 10 or 11, x64 — intel or amd, desktops and laptops. the loader checks your machine before it touches anything, and the guide that ships with it covers the rest.

crypto only. the loader and guide land in your inbox minutes after payment — and we keep nothing: no logs, no telemetry, no account data.

the machine they knew is gone.

one press from a machine nobody remembers — and the cheats line is already in the forge.

crypto only · founding prices until the forge opens